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DETAILED ACTION 

1. Applicant's amendment filed on May 21, 2007 has been entered. Claims 1-5, 8- 
10 are pending. Claims 6 and 7 are canceled by the applicant and claims 1, 5 and 10 
are also amended by the applicant. 

2. The Office would like to notify the Applicant that there has been a change in the 
Examiner to conduct the future examination and prosecution processes of the currently 
pending application. 

Claim Objections 

3. Claims 9 and 10 are objected to because of the following informalities: 

Claim 9 recites "An apparatus comprising.... the method according to claim 2". 
The apparatus claim 9 depends on the method claim 2, which is improper form of 
dependent claim. 

Claim 10 recites "A program product stored on a computer readable medium 
comprising.... the method according to claim 2". The program product claim 10 depends 
on the method claim 2, which is improper form of dependent claim. 

Claim Rejections - 35 USC § 101 

35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

4. Claim 10 is rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. 
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Claim 10 is directed to "program product (instruction)" stored in a "computer 
readable medium". Claim 10 is merely stored so as to be read or outputted by a 
computer without creating any functional interrelationship, either as part of the stored 
data or as part of the computing processes performed by the computer, and such 
descriptive material alone doesn't impart functionality either to the data as so structured, 
or to the computer. The claim limitations still do not provide an explicit (inter) 
relationship between the computer readable medium and stored data and a 
technological art, environment or machine that is required for the claims to be statutory. 
Therefore, claims 1, 7 and 10 are not statutory since no requisite functionality is present 
to satisfy the practical application requirement. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 1-5 and 8-10 are rejected under 35 U.S.C. 103(a) as being unpatentable 

over Talati et al. (U.S. Patent No. 5,903,878) in view Rosen (US Patent No. 6,336,095) 

and in view of Weisman et al (US Patent No. 7,171 ,475). 



As per Claim 1 . A method for protecting an identifier of a subscriber, during data 
transfer between a service provider and a content provider, when said subscriber sends 
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a request to said service provider to obtain data belonging to said content provider, said 
method comprising the steps of: - upon reception of said subscriber request by said 
service provider: [Abstract, lines 3-5] - computing an encrypted token using said 
identifier of said subscriber [Column 3, lines 12-19 and lines 29-33; The TA' is the 
Service Provider.]; and, - transmitting said subscriber request and said encrypted 
token to said content provider [Column 3, lines 20-21]; - upon reception by said service 
provider of a certification request comprising an encrypted token, sent by said content 
provider [Column 3, lines 21-22]: - extracting said encrypted token from said 
certification request [Column 3, lines 34-36]; - decrypting said extracted encrypted 
token to determine said subscriber identifier [Column 3, lines 34-36]; - checking said 
determined subscriber identifier [Column 2, lines 66-67]; and, - transmitting a success or 
failure indication to said content provider in response to said certification request 
[Column 3, lines 36-45;]; - upon reception of said data belonging to said content 
provider by said service provider, transmitting said data belonging to said content 
provider to said subscriber. [Column 3, lines 54-56] 

Further explanation of claim 1: Talati et al. teach the initial request from the 
subscriber to the content provider as the general premise of their invention: "A 
transaction order generated by a purchaser has a unique transaction identifier 
associated therewith and [in one embodiment] the purchase order is transmitted to the 
merchant and then to a transaction administrator. (Abstract)." Computation of a token 
bearing user identification is described by Talati et al. as, "The electronic transaction 
includes details of the transaction such as descriptions of the item(s) that the client 
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desires to purchase... and a unique transaction identifier that... is uniquely associated 
with the particular purchase transaction. (Column 3, lines 12-19)." "This 
communication between the [Service Provider] and the client may be encrypted using a 
suitable encryption method of a set of virtual keys known only to the [Service Provider] 
and each individual purchaser. (Column 3, lines 29-33)." Talati et al. show transmitting 
the request and token to the content provider by: "[The electronic transaction with 
descriptions of the items and a unique identifier] information is transmitted to the 
merchant over the network. (Column 3, lines 20-21)." Receiving a 'certification request' 
from the content provider is taught as, "In response to the purchase order, the merchant 
generates a payment authorization request for transmission to the [service provider]. 
(Column 3, lines 21-22)." Extracting and decrypting the token from the certification 
request to determine the subscriber identifier is taught as, "Upon receipt of the 
validation request, the client decodes, if necessary, the encrypted validation request 
and extracts the unique transaction identifier therefrom. (Column 3, lines .34-36)." 
Checking the determined subscriber identifier is taught as, "The transaction 
administrator [Service Provider] is an entity which authenticates entities and validates 
the content of the transaction [as previously defined] by the originator. (Column 2, lines 
65-67)." Transmitting a success or failure indication to the content provider is taught by 
the equivocal passage in Talati et al., "The identifier is compared to a listing of 
generated transaction identifiers at the client to confirm that the client authorized the 
transaction order with which the transaction identifier is associated. (Column 3, lines 
36-39)." Talati et al. show subsequently transmitting the content provider data to the 
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user (or subscriber) upon a success by, "If the information in the transaction request 
checks out, the item(s) ordered may be delivered to the [subscriber] by the [content 
provider]. (Column 3, lines 54-56)." 

Rosen teaches determining a separator (S); determining a time varying value (T); 
concatenating the subscriber identifier with T in a string such that the subscriber 
identifier and T are separated with S [Fig. 2, filed 10, 34, 48, 56 separated with field 12- 
16, 50-54]. 

Therefore, it would have been obvious to a person of ordinary skill in the art at the time 
the invention was made to combine Rosen with Talati, since one would have been 
motivated to enable remote delivery of electronic merchandise or services with real-time 
anonymous payment or real-time authorization [Rosen, col. 2 lines 4-9]. 
Weisman teaches reception of a Simple Object Access Protocol (SOAP) certification 
request [Fig. 10]; extracting said encrypted token from said SOAP certification request , 
wherein the encrypted token is in one of the SOAP body and a predefined SOAP 
header [Fig. 1 0, col. 1 1 lines 40-44, col. 1 2 lines 39-48]. 

Therefore, it would have been obvious to a person of ordinary skill in the art at the time 
the invention was made to combine Weisman with Talati and Rosen, since one would 
have been motivated to provide host-provided peer networking for hosted devices 
[Weisman, col. 1 lines 7-8]. 

As per claim 2 , the rejection of claim 1 is incorporated and Talati teaches: the step of 
verifying rights of said subscriber, wherein said steps of computing an encrypted token 
and transmitting said subscriber request and said encrypted token to said content 
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provider are done only if said subscriber holds corresponding rights. [Column 3, lines 
45-48; where the 'queries' are the transaction requests (or the content requests). The 
user would have to be registered to have such 'queries' made, thereby granting 'rights' 
by way of association with the registration.] 

As per claim 3 . the rejection of claim 1 is incorporated and Talati teaches: the step of 
memorizing said encrypted token so that it can be reused without having to be 
recomputed. [Column 3, lines 45-48; the queries/tokens are memorized for use later.] 
As per claim 4 , the rejection of claim 1 is incorporated and Talati teaches: the step of 
charging said subscriber if said determined subscriber identifier is certified. [Column 2, 
lines 55-59 and column 2 & 3, lines 66-67 & 1-2] 

As per claim 5 . the rejection of claim 1 is incorporated and Talati teaches: the step of 
formatting said data belonging to said content provider in a format suitable and usable 
by the subscriber [column 3, lines 56-59] 

As per claim 8 , the rejection of claim 1 is incorporated and Talati teaches: The method 
of claim 1 implemented using web service technology. [Column 3, lines 56-59] 
As per claim 9 , An apparatus comprising means adapted for carrying out the method 
according to claim 2. [Rejected per claim 2.] 

As per claim 10 . A computer-like readable medium comprising instructions for carrying 
out the method according to claim 2. [Rejected per claim 2.] 
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Response to Amendment 

6. Applicant has amended claim 1, which necessitated new ground of rejection. See 
rejection above. 

Applicant has amended claim 10 to include the limitations "A program product stored 
on a computer readable medium..." to correct the 35 U.S.C. 101 issue. However, the 
newly amended claim has not overcome such deficiency. See 35 U.S.C. 101 rejection 
above. 

Conclusion 

7. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. . Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 
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Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to Nirav Patel whose telephone number is 571- 

272- 5936. If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Vu can be reached on 571-272-3859. The fax and phone 
numbers for the organization where this application or proceeding is assigned is 571- 

273- 8300. Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 571-272- 
2100. 



NBP 



8/17/07 




